Skip to Content.
Sympa Menu

mfa-interop - RE: [MFA-Interop] Is the InCommon MFA Profile ready to use?

Subject: MFA Interop Working Group

List archive

RE: [MFA-Interop] Is the InCommon MFA Profile ready to use?

Chronological Thread 
  • From: "Cantor, Scott" <>
  • To: Mark Montague <>, "" <>
  • Cc: Liam Hoekenga <>
  • Subject: RE: [MFA-Interop] Is the InCommon MFA Profile ready to use?
  • Date: Mon, 12 Sep 2016 16:44:07 +0000
  • Accept-language: en-US
  • Authentication-results: spf=pass (sender IP is;; dkim=none (message not signed) header.d=none;; dmarc=bestguesspass action=none;
  • Ironport-phdr: 9a23:kTOOUxUcRDRGSv7I5AfzmiLBtsvV8LGtZVwlr6E/grcLSJyIuqrYZhGFt8tkgFKBZ4jH8fUM07OQ6P+wHzFbqs/c+Fk5M7VyFDY9wf0MmAIhBMPXQWbaF9XNKxIAIcJZSVV+9Gu6O0UGUOz3ZlnVv2HgpWVKQka3HUNPK+/0Ao/fidisn6D3osWLIlYAuD3oRLpoL12TqgPNv8YLjMM2L68ryR7OpGdgZuFXzmMuKF6OyVK0rMK+9dti9ThdofU5389GWqL/eqM+C7tCA35uZ2U77YjqswXOVwyXznoaWWITlx1ORQ/f40epcI32t36wneN7xC6AeYXNRrcoRX7qu6xiTgPvkmFdHzki7SfahtEm3/ETmw6ouxEqm92cW4qSLvcrO/qFJd4=
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

> Is the InCommon MFA Profile ready for use at this point? What things,
> if any, remain to be done before people should start configuring
> production InCommon IdPs and SPs to use the profile?

I think the basic problem is that if this moves beyond this community, the
identifier will likely change, and so to my mind, that renders it unwise to
deploy at present. YMMV.

I don't have a stake in this because my campus can't meet the profile's
requirements, so I'm just presenting it from the point of view of the
problems with inertia when you end up with a changing identifier.

(And Paul just ninja'd me, so what he said.)

-- Scott

Archive powered by MHonArc 2.6.19.

Top of Page